Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
fc155764 by Salvatore Bonaccorso at 2025-04-21T16:52:27+02:00
Update status for CVE-2025-29787/rust-zip
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -12549,10 +12549,10 @@ CVE-2025-2199 (SQL injection vulnerability in the
Innovaci\xf3n y Cualificaci\xf
CVE-2025-29788 (The Syliud PayPal Plugin is the Sylius Core Team\u2019s plugin
for the ...)
NOT-FOR-US: Syliud PayPal Plugin
CVE-2025-29787 (`zip` is a zip library for rust which supports reading and
writing of ...)
- - rust-zip <unfixed>
+ - rust-zip <not-affected> (Vulnerable code never in Debian released
revision)
NOTE:
https://github.com/zip-rs/zip2/security/advisories/GHSA-94vh-gphv-8pm8
+ NOTE: Introduced with:
https://github.com/zip-rs/zip2/commit/633a6733e6ebb19de9745d6679935c2b168821d0
(v1.3.)
NOTE: Fixed by:
https://github.com/zip-rs/zip2/commit/a2e062f37066c3b12860a32eb1cb44856cfb7afe
(v2.3.0)
- TODO: check, might only be introduced in 1.3.0
CVE-2025-29786 (Expr is an expression language and expression evaluation for
Go. Prior ...)
- golang-github-antonmedv-expr <unfixed>
[bookworm] - golang-github-antonmedv-expr <no-dsa> (Minor issue)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc155764ebceee91b4e239b5972cc75e0d5914e9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fc155764ebceee91b4e239b5972cc75e0d5914e9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
